changeset 317:5a902083a216 gmap2

Use PHP cookie options array and set SameSite policy.
author Matti Hamalainen <ccr@tnsp.org>
date Thu, 03 Dec 2020 06:26:08 +0200
parents 9f2e0e797abe
children f2c031427bb3
files index.php
diffstat 1 files changed, 10 insertions(+), 1 deletions(-) [+]
line wrap: on
line diff
--- a/index.php	Thu Oct 29 08:10:53 2020 +0200
+++ b/index.php	Thu Dec 03 06:26:08 2020 +0200
@@ -43,7 +43,16 @@
 if (isset($_GET["css"]))
 {
   $pageCSSIndex = intval($_GET["css"]);
-  setcookie($pageCSSCookie, $pageCSSIndex, time() + 365*24*60*60, "/"); // expire in a year
+
+  $coptions = [
+    "expires"  => time() + 365*24*60*60,
+    "path"     => "/",
+    "samesite" => "Strict",
+    "secure"   => false,
+    "httponly" => false,
+  ];
+
+  setcookie($pageCSSCookie, $pageCSSIndex, $coptions);
 }
 else
 {